Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22430 | GEN003815 | SV-45786r1_rule | ECSC-1 | Medium |
Description |
---|
The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using Remote Procedure Calls (RPCs). |
STIG | Date |
---|---|
SUSE Linux Enterprise Server v11 for System z | 2015-01-26 |
Check Text ( C-43123r1_chk ) |
---|
Check if the portmap and/or rpcbind packages are installed. # rpm –q portmap rpcbind If a package is found, this is a finding. |
Fix Text (F-39180r1_fix) |
---|
Remove the portmap and/or rpcbind packages. # rpm -e portmap rpcbind # SuSEconfig |